$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.mft File: 58ecca6e-e4af-4a56-891d-c2e3051a1bc2.mft (raw, json) Hash identifier: SodQFa9o5v5c0gTJlt9Ur99wQHEG8oroFE4P3Dnu0e0= Subject key identifier: E4:93:6B:F1:45:15:82:0D:5F:A6:85:93:C9:AE:8F:AA:36:B2:5B:F7 Authority key identifier: 52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C Certificate issuer: /CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2 Certificate serial: 010D0C9F4328584AC67BC48FEAD7D0EF1B1A3C30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.mft Manifest number: 010D0C9F4328584073A848932A16F3529617ED55 Signing time: Thu 07 Aug 2025 08:00:08 +0000 Manifest this update: Thu 07 Aug 2025 08:00:08 +0000 Manifest next update: Sun 10 Aug 2025 08:00:00 +0000 Files and hashes: 1: 5039e35f-77a6-3bcb-9e80-9581d5115cbe.roa (hash: T2kb5aWtHe9AzLTdKbB986OGS9h0MPKIROLtZnfVXTI=) 2: 58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl (hash: fb5+ngHmKjQODOuv06Jk6smVu1soFY27AaUpmFZLeo8=) 3: ac745f9c-932a-36ae-b3fa-7a7a2e9a4c5b.roa (hash: Yh+NaDe76h7Uv8aWeoTIfAKHf2ycKyR1IgL5nqfJIeg=) 4: da48e2b0-51a1-3344-a379-970483f014db.roa (hash: c3T7j/7wC138MHlGVInrFvyNOn+y5ZpxKjciDo6f6U8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c6:7b:c4:8f:ea:d7:d0:ef:1b:1a:3c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2 Validity Not Before: Aug 7 08:00:08 2025 GMT Not After : Aug 10 08:00:00 2025 GMT Subject: CN=4ee969f5-820a-4226-9f0d-42557e50f3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:67:75:0a:32:e5:b6:be:c7:c1:f4:1b:d9:20: 8f:09:d3:13:d5:07:35:70:a5:c9:1f:d3:e8:f9:19: ce:79:28:1b:5e:17:ef:df:eb:d3:d3:59:e8:12:27: a5:38:77:79:b3:ed:10:52:41:f2:a3:64:07:95:40: 1f:0f:8f:e4:e5:4f:97:92:0f:c0:af:21:c7:7e:3f: f1:42:ed:bb:5d:b4:d1:b3:53:36:25:ff:16:43:be: ce:70:e3:f3:02:ba:29:af:98:83:a8:b9:6c:1b:96: 8b:64:43:ab:db:c0:7c:41:b1:57:28:33:4e:72:17: 9c:15:19:b4:28:3a:fb:ed:0a:10:37:e7:41:38:d8: d0:0f:62:6b:a3:43:b7:17:f5:3e:ae:67:4a:b7:34: 29:82:25:77:d8:bc:e6:fb:32:38:13:fd:b5:18:f7: e1:8f:cc:6c:18:f5:a5:2e:14:bb:8c:26:0b:08:a0: 41:26:62:98:37:fa:e4:23:2a:b6:a9:35:a3:be:ca: c2:5d:aa:34:9e:7d:5d:f2:09:45:22:34:f1:28:43: 27:3a:9d:ab:3d:e9:f3:f5:b5:93:4e:53:b6:d9:6f: a3:71:a8:72:63:a1:16:69:71:eb:f0:b5:a3:62:ac: 73:6b:d9:0c:23:65:2f:71:54:ca:7d:58:78:17:47: c8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:93:6B:F1:45:15:82:0D:5F:A6:85:93:C9:AE:8F:AA:36:B2:5B:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl X509v3 Authority Key Identifier: keyid:52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:fb:f9:ee:0b:04:e1:7b:d3:47:01:76:52:5f:d6:7e:d1:9a: c9:e6:95:63:36:9d:c0:79:6a:9f:48:09:87:fb:8f:4f:ff:6e: df:ee:7f:6f:0e:f1:a2:c1:58:d8:82:3a:5b:9e:2f:c0:f8:da: 15:d2:75:4b:10:47:b9:29:8b:2a:a5:ba:69:8f:42:d3:e6:e4: 99:98:e8:e5:b3:c1:47:81:80:3c:ea:85:c9:78:3c:48:58:88: 2c:30:92:05:55:5a:e0:1c:95:7c:75:c4:55:47:e2:28:02:c2: 50:5e:60:09:23:4d:32:ef:11:9b:31:a4:50:4a:0b:89:81:ee: 41:c2:b5:b1:43:91:a1:ae:0c:fe:76:7a:c3:23:8b:60:95:2e: e3:de:d3:8d:1d:4e:80:2b:d7:48:80:a3:57:16:4f:0f:e9:2d: 96:15:78:bd:93:eb:22:59:c6:3a:4a:ee:68:c4:fd:fb:c2:6f: 50:bc:0b:d8:cd:a6:4f:32:9e:b1:6b:45:8e:7d:a1:1d:ad:29: 78:b1:27:d0:70:dc:be:32:b7:33:a1:60:0a:f2:5b:54:f1:5b: a8:31:28:29:49:3e:5f:17:5c:3e:a7:13:53:af:5d:db:38:76: 3a:da:78:84:20:4c:d4:dc:da:05:06:5e:3b:4f:8c:70:2c:cd: 86:a2:98:a9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErGe8SP6tfQ7xsaPDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThlY2NhNmUtZTRhZi00YTU2LTg5MWQtYzJlMzA1MWEx YmMyMB4XDTI1MDgwNzA4MDAwOFoXDTI1MDgxMDA4MDAwMFowLzEtMCsGA1UEAxMk NGVlOTY5ZjUtODIwYS00MjI2LTlmMGQtNDI1NTdlNTBmM2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGd1CjLltr7HwfQb2SCPCdMT1Qc1cKXJH9Po +RnOeSgbXhfv3+vT01noEielOHd5s+0QUkHyo2QHlUAfD4/k5U+Xkg/AryHHfj/x Qu27XbTRs1M2Jf8WQ77OcOPzAropr5iDqLlsG5aLZEOr28B8QbFXKDNOchecFRm0 KDr77QoQN+dBONjQD2Jro0O3F/U+rmdKtzQpgiV32Lzm+zI4E/21GPfhj8xsGPWl LhS7jCYLCKBBJmKYN/rkIyq2qTWjvsrCXao0nn1d8glFIjTxKEMnOp2rPenz9bWT TlO22W+jcahyY6EWaXHr8LWjYqxza9kMI2UvcVTKfVh4F0fIkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOSTa/FFFYINX6aFk8muj6o2slv3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OGVj Y2E2ZS1lNGFmLTRhNTYtODkxZC1jMmUzMDUxYTFiYzIvNThlY2NhNmUtZTRhZi00 YTU2LTg5MWQtYzJlMzA1MWExYmMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNThlY2NhNmUtZTRhZi00YTU2LTg5 MWQtYzJlMzA1MWExYmMyLzU4ZWNjYTZlLWU0YWYtNGE1Ni04OTFkLWMyZTMwNTFh MWJjMi5jcmwwHwYDVR0jBBgwFoAUUuGuIUtwcT5isDYp+pRXmy2QESwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OGVjY2E2ZS1lNGFmLTRhNTYtODkxZC1jMmUz MDUxYTFiYzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAk+/nuCwThe9NHAXZSX9Z+ 0ZrJ5pVjNp3AeWqfSAmH+49P/27f7n9vDvGiwVjYgjpbni/A+NoV0nVLEEe5KYsq pbppj0LT5uSZmOjls8FHgYA86oXJeDxIWIgsMJIFVVrgHJV8dcRVR+IoAsJQXmAJ I00y7xGbMaRQSguJge5BwrWxQ5Ghrgz+dnrDI4tglS7j3tONHU6AK9dIgKNXFk8P 6S2WFXi9k+siWcY6Su5oxP37wm9QvAvYzaZPMp6xa0WOfaEdrSl4sSfQcNy+Mrcz oWAK8ltU8VuoMSgpST5fF1w+pxNTr13bOHY62niEIEzU3NoFBl47T4xwLM2Gopip -----END CERTIFICATE-----Generated at Thu Aug 7 11:13:01 2025 by rpki-client